Unrated severityNVD Advisory· Published Mar 25, 2011· Updated Jun 16, 2026
CVE-2011-1520
CVE-2011-1520
Description
The default configuration of the server console in IBM Lotus Domino does not require a password (aka Server_Console_Password), which allows physically proximate attackers to perform administrative changes or obtain sensitive information via a (1) Load, (2) Tell, or (3) Set Configuration command.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:ibm:lotus_domino:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:lotus_domino:*:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
6- publib.boulder.ibm.com/infocenter/domhelp/v8r0/index.jspnvd
- securityreason.com/securityalert/8164nvd
- www.lotus.com/ldd/doc/domino_notes/rnext/help6_admin.nsf/2e73cbb2141acefa85256b8700688cea/0c50e423038555d085256c1d003a31f0nvd
- www.lotus.com/ldd/dominowiki.nsf/dx/server_console_passwordnvd
- www.securityfocus.com/archive/1/517119/100/0/threadednvd
- www.zerodayinitiative.com/advisories/ZDI-11-110nvd
News mentions
0No linked articles in our index yet.